Vulnerabilities (CVE)

Filtered by CWE-215
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-22194 1 Lfprojects 2 Case Python Utilities, Cdo Local Uuid Utility 2024-01-19 N/A 2.8 LOW
cdo-local-uuid project provides a specialized UUID-generating function that can, on user request, cause a program to generate deterministic UUIDs. An information leakage vulnerability is present in `cdo-local-uuid` at version `0.4.0`, and in `case-utils` in unpatched versions (matching the pattern `0.x.0`) at and since `0.5.0`, before `0.15.0`. The vulnerability stems from a Python function, `cdo_local_uuid.local_uuid()`, and its original implementation `case_utils.local_uuid()`.
CVE-2023-51390 1 Aiven 1 Journalpump 2024-01-02 N/A 7.5 HIGH
journalpump is a daemon that takes log messages from journald and pumps them to a given output. A logging vulnerability was found in journalpump which logs out the configuration of a service integration in plaintext to the supplied logging pipeline, including credential information contained in the configuration if any. The problem has been patched in journalpump 2.5.0.